Release 22.12
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good

This commit is contained in:
Jérémy Lecour 2022-12-14 11:37:38 +01:00 committed by Jérémy Lecour
parent 21ab9b1e68
commit 240ccee12b

View file

@ -12,56 +12,67 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Added ### Added
* all: Use proper keyrings directory for APT version ### Changed
* all: Add signed-by option for additional APT sources
### Fixed
### Removed
### Security
## [22.12] 2022-12-14
### Added
* all: add signed-by option for additional APT sources
* all: preliminary work to support Debian 12 * all: preliminary work to support Debian 12
* all: use proper keyrings directory for APT version
* evolinux-base: replace regular kernel by cloud kernel on virtual servers * evolinux-base: replace regular kernel by cloud kernel on virtual servers
* lxc-php: set php-fpm umask to 007 * lxc-php: set php-fpm umask to `007`
* nagios-nrpe: check_ceph_* * nagios-nrpe: `check_ceph_*`
* nagios-nrpe: check_haproxy_stats supports DRAIN status * nagios-nrpe: `check_haproxy_stats` supports DRAIN status
* packweb-apache: enable log_forensic module * packweb-apache: enable `log_forensic` module
* varnish: create special tmp directory for syntax validation
* rabbitmq: add link in default page * rabbitmq: add link in default page
* varnish: create special tmp directory for syntax validation
### Changed ### Changed
* certbot: auto-detect HAPEE version in renewal hook * certbot: auto-detect HAPEE version in renewal hook
* evocheck: install script according to Debian version * evocheck: install script according to Debian version
* evolinux-base: utils.yml can be excluded * evolinux-base: `utils.yml` can be excluded
* evolinux-todo: execute tasks only for Debian distribution (because this task is a dependency for others roles used on different distributions) * evolinux-todo: execute tasks only for Debian distribution (because this task is a dependency for others roles used on different distributions)
* evolinux-user: Add sudoers privilege for check php\_fpm81 * evolinux-user: add sudoers privilege for check `php_fpm81`
* evomaintenance: allow missing API endpoint if APi is disabled * evomaintenance: allow missing API endpoint if APi is disabled
* java: use default JRE package when version is not specified * java: use default JRE package when version is not specified
* keepalived: change exit code (_warning_ if running but not on expected state ; _critical_ if not running)
* listupgrade: better detection for PostgreSQL * listupgrade: better detection for PostgreSQL
* listupgrade: sort/uniq of packages/services lists in email template * listupgrade: sort/uniq of packages/services lists in email template
* lxc-solr: detect the real partition options * lxc-solr: detect the real partition options
* lxc-solr: download URL according to Solr Version * lxc-solr: download URL according to Solr Version
* lxc-solr: set homedir and port at install * lxc-solr: set homedir and port at install
* minifirewall: whitelist deb.freexian.com * minifirewall: whitelist deb.freexian.com
* openvpn: shellpki upstream release 22.12.2
* openvpn: specifies that the mail for expirations is for OpenVPN
* packweb-apache: manual dependencies resolution * packweb-apache: manual dependencies resolution
* redis: some values should be quoted * redis: some values should be quoted
* redis: variable to disable transparent hugepage (default: do nothing) * redis: variable to disable transparent hugepage (default: do nothing)
* squid: whitelist deb.freexian.com * squid: whitelist `deb.freexian.com`
* varnish: better package facts usage with check mode and tags * varnish: better package facts usage with check mode and tags
* varnish: systemd override depends on Varnish version instead of Debian version * varnish: systemd override depends on Varnish version instead of Debian version
* keepalived: change exit code (warning if running but not on expected state ; critical if not running)
* openvpn: shellpki upstream release 22.12.2
* openvpn: specifies that the mail for expirations is for OpenVPN
### Fixed ### Fixed
* evolinux-user: Fix sudoers privilege for check php\_fpm80 * evolinux-user: Fix sudoers privilege for check `php_fpm80`
* nagios-nrpe: Fix check opendkim for recent change in listening port * nagios-nrpe: Fix check opendkim for recent change in listening port
* varnish: fix missing state, that blocked the task
* proftpd: Fix format of public key files controlled by ansible
* proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody)
* openvpn: Fix mode of shellpki script * openvpn: Fix mode of shellpki script
* proftpd: Fix format of public key files controlled by Ansible
* proftpd: Fix mode of public key directory and files (they have to be accessible by `proftpd:nobody`)
* varnish: fix missing state, that blocked the task
### Removed ### Removed
* openvpn: Deleted the task fixing the CRL rights since it has been fixed in upstream * openvpn: Deleted the task fixing the CRL rights since it has been fixed in upstream
### Security
## [22.09] 2022-09-19 ## [22.09] 2022-09-19